Originally posted by Uranium235:

And what would be more efficient about that than the current system? I am sure phising links get reported fairly quickly, and more important more reliably than any automatic filter you have.

Uhm not sure if you've been using TF2Outpost in the past few weeks but in every 2nd trade you can find a hidden phishing link that probably comes from the same source. If those links keep on infecting users who click on them then it will spread like wildfire. And you're asking why an automated system would be better than the work done by a handful of moderators?

Originally posted by Uranium235:

It's not about the URL, I can change that at any time to avoid "free" "gift" and such. It's a cat and mouse game. Not worth it.

Once again, the blacklist shouldn't contain every phishing attempt ever, that would be overkill. If I post my shady site on Outpost and I get reported, I should get banned. Now if there are 20 different users posting the same link that should be a warning sign, and that's where a blacklist would be useful.

I'm not sure if we have the same concept in mind. In my opinion this is such a filter would work:

• User attempts to send a message
  
• Filter kicks in and compares the user's message against a list of forbidden phrases
  
• If no match is found the message goes through
  
• If there's a match, post gets hidden and automatically reported

That's it. After that an admin can decide if further action needs to be taken, depending on whether the user is a phisher or the account has been compromised etc.

Can you provide me a false positive for "Get free games *insert URL here*"?

Originally posted by Uranium235:

It's not the regexp that is the problem in your suggestion. Your system would need a lot of changes to the existing report system to function properly and without more work for admins and mods than they already have.

It only needs a filter that is run before someone posts a message. No changes need to be done to the report system. If new phishers and/or new ways of phishing are reported, all moderators have to do is pass the info onto Sneeza so he can update the blacklist with a new regexp formula. It wouldn't take more than a couple of mins.

Originally posted by Uranium235:

However clever you are designing your regexp, there will always be false positives and misses. Phishers will very quickly find a way around them. You'd also have to trigger on every URL shortener service there is.

False positives no. New ways of phishing yes. I don't think there are any legit users who should be allowed to post "Get free games *insert URL here*".

Originally posted by Uranium235:

Only feasible way I see would be to use a white list for URLs. But that would restrict linking too much. Who's then to say (and take the time to evaluate) what sites are allowed to link.

A blacklist should be enough. The purpose of this wouldn't be to blacklist each and every single phishing attempt, but to prevent mass phishing that has been happening recently. An IP range ban can only do that much.

Originally posted by fjubben:

if you can't find the items in a box or get it as a drop it's uncraftable i think

Actually that makes sense, it just shows the item's origin. If it was purchased from the store it's uncraftable, if it dropped ingame it's "craftable". Even if there's no craft system in Dota 2, the backend is still the same as TF2.

They were always market as Uncraftable, it just wasn't as obvious as it is now. I'm not sure what causes this though.

Originally posted by A Distinctive Lack Of Ponies:

Oh, and about perma-hidden posts that cannot be seen...
I think perma-hiding posts by moderators should be disabled. If perma-hidden post contains some bullying or meaningless shit, then there's no reason for trade owner to want it to be hidden permanently. If there is, then it probably contains something that he doesn't want others to know. Probably involving unfair methods of ripping people off.

Or it contains phishing links or useless spam you wouldn't want to read anyway.

Interesting, well most people who I talked to said it randomly wore off, so maybe the trigger that does that is faulty. Another person wrote that the date is reset every time you trade it, so you have to trade it back and forth in order for it to maintain the effect.

Bottom line is, I wouldn't pay extra for a glitchy item that's like a ticking bomb and might get fixed anytime. So if people are asking for Buds or unusuals for a color changing Bill's Hat, don't fall in the trap.

Assuming they're not dumb enough to make the same mistake again it should be safe usually. But that's ultimately up to you to decide. I would probably avoid trading with people with a new account / no rep at all but trading with veteran traders should be fine. I know people who are on probation due to credit card issues, it doesn't necessarily mean they've scammed others.

http://puu.sh/1QFZ2

Yes it takes several days for people realise their inventory isn't set to 'Public'.

If the site says your profile/backpack is private then you can be 99.99% sure it is. Updating is usually instant, you rarely have to wait for more than a second or two.

To the OP: setting your inventory to public is not enough, your profile has to be public too just like the error message on TF2OP suggests.